J.4_DD254_Continuation_Page.pdf

DD 254 BLOCK 13 CONTINUATION PAGE FOR IT SUPPORT SERVICES

SOLICITATION: W91ZLK-18-R-0014

1a. The highest level of facility clearance required for the contractor to perform is up to and including Secret.

8a. All locations where work is to be performed , other than the one specified in Item 6a,b and c under this solicitation, including contractor, subcontractor, and Government facilities will be listed on the Award/Task Order DD Form 254 in block 8a,b and c. CONUS and OCONUS locations will be determined at time of award and/or task orders. All subcontractors will be listed on award DD Form 254 as additional locations of performance.

10j. Safeguarding Controlled Unclassified Information (CUI) information generated and/or provided under this contract shall be safeguarded and marked as specified in AR 25-55 and DoD 5200.1-M (Marking is in Volume 2).

10k. SIPRNET ACCESS: All contractors requiring access to the SIPRNET MUST HAVE A FINAL SECRET CLEARANCE OR Interim Top Secret clearance. All contractors with SIPRNET access MUST receive COMSEC and NATO Awareness briefings from their FSO prior to being granted access. COMSEC and NATO Awareness Briefing dates must be recorded on all visit requests. The NATO Awareness Briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing SIPRNET. The contractor shall not access, download or further disseminate any special access date (i.e., intelligence, NATO, COMSEC, ect.) outside the execution of the defined contract requirements.

DISN SIPRNet dated 01 JUN 2013.

All contractors will read the NATO Central Registry awareness briefing located at:

https://secureweb.hqda.pentagon.mil/cusr/forms.aspx prior to being issued a SIPRNet account.

This briefing does not authorize NATO access, and is solely for the purpose of awareness.

11a. Contractor performance is restricted to Government facility(ies). Government agency or activity will provide security classification guidance for performance of this contract. Submit visit request to the KO and/or Security Management Office for need-to-know verification.

11j. Contractor shall adhere to the OPSEC requirements IAW the following Program OPSEC Plan/SOP:

CECOM OPSEC Plan, 19 June 2017, unless otherwise antinodes within the TO.

Level I OPSEC training is available at the following website: http://cdse.edu/catalog/elearning/GS130.html (Duration 45minutes).

13a. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67, DoD 8570.0 and affiliated regulations. Army regulation available at www.apd.army.mil

13b. Foreign subcontractors, foreign vendors and/or visitors that are not cleared US Companies, participating in Army foreign disclosure issues will be handled in accordance with AR 380-10, Foreign Disclosure and Contacts with Foreign Representatives, dated 4 DEC 2013.

• All disclosures (i.e., oral, visual, briefing, documents) to foreign nationals require prior approval by the foreign disclosure officer.

• All requests for non-US cleared Foreign subcontractor and/or Foreign own companies to perform on this contract must be requested from the Prime Contract to the KO through Program Office and approved by Foreign Disclosure Officer.

http://cdse.edu/catalog/elearning/GS130.html http://www.apd.army.mil/

DD 254 BLOCK 13 CONTINUATION PAGE FOR IT SUPPORT SERVICES

SOLICITATION: W91ZLK-18-R-0014

13c. Classified information will be protected IAW the NISPOM, Chapter 5. All security incidents involving classified information will be reported to the CECOM G2 Industrial Security Officer, and DSS Industrial Security Representative. Information will be forwarded to KO and the PM so a program damage assessment can be conducted IAW AR 380-49.

13d. All subcontractor DD254s and subcontractor tier DD254s will be sent to the KO. Any Contractors/subcontractors owned by Foreign Companies and that have a clearance issued by the Defense Security Service under a Special Security Agreement need to have a National Interest Determination (NID) approved if access is required to: Top Secret; COMSEC; Restricted Data; SCI and/or SAP. NID requirements and justification must be sent through CECOM G2 to be forwarded to the approving agencies. Only after a NID approval is received will a FOCI contracting firm be authorized to work on the program.

13e. Security Training and Briefing: IAW AR 380-49 Chapter 3, the FSO will provide Threat Awareness and Reporting Program (TARP) training in addition to initial and refresher security training IAW AR 381-12, paragraph 1-14 and Chapter 2 for contractors working in contractor facilities.

Contractors may be exempt from such security training if they can provide documentation they have had similar training from their FSO. The FSO will forward Certificates and/or a signed Letter of Certification for Training to the COR for verification of required training to be included in the contract folder.

Manager/Representative. Some Security training provided to integrated/embedded contractors will include:

• TARP Training: Live training provided by 902d –Annual training requirement

• Initial Security Orientation: Online training available on the Army Learning Management

System (ALMS) site, reference ALARACT 207-2103 – Initial training

• Annual Security Orientation: Online training available on the Army Learning Management

System (ALMS) site, reference ALARACT 207-2103 – Annual training requirement

• Derivative Classification Training, reference DoD 5200.01-V3-Biennial training requirement

• Operations Security Training, reference AR 530-1-Annual training requirement

13f. If contractor must submit subcontracts to DD Form 254’s to the KO for the contract file and forward to CECOM G2 for review to ensure Army requirements flow down to the subcontractor.

13g. All Facility Clearance sponsorships for subcontractors must have Government approval and Certification on the subcontractor’s DD 254. Submit all requests to the CECOM G2 security office.

13h. Records of security related training of contractors and embedded contractors must be available for review.

Certification and Signature: Security requirements stated herein are complete and adequate for safeguarding the classified information to be released or generated under this classified effort. All questions shall be referred to the official named below.

X Kia Weber

COR